Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2215 results

CVE-2018-16373

snappyjack/cve-2018-16373

Frog CMS 0.9.5 has an Upload > vulnerability that can create files via > /admin/?/plugin/file_manager/save

exploitationmisconfigurationpenetration-testing+2

7 years ago

gitbook-xss

ianxtianxt/gitbook-xss

xss for gitbook

exploitationvulnerability-analysisweb-application-exploitation+1

6 years ago

CVE-2021-43798

okymi-x/cve-2021-43798

Python toolkit for authorized testing of CVE-2021-43798 Grafana path traversal, with arbitrary file read PoC, secret decryption, and user hash export…

encryption-decryption-toolsexploitationinformation-gathering+3

2 months ago

CVE-2023-46818

hunntr/cve-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if…

code-analysisexploitationpenetration-testing+2

161 year ago

ppsx-file-generator

temesgeny/ppsx-file-generator

ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)

exploitationpayload-generationpenetration-testing+3

668 years ago

CVE-2024-22514-Remote-Code-Execution

orange-418/cve-2024-22514-remote-code-execution

Proof-of-concept exploit for CVE-2024-22514 enabling remote code execution in iSpyConnect Agent DVR 5.1.6.0 via malicious objects.xml file…

exploitationpenetration-testingremote-access-tool+2

2 years ago

CVE-2024-43044-jenkins-creds

dacc4/cve-2024-43044-jenkins-creds

Exploit for CVE-2024-43044 enabling arbitrary file read from Jenkins controller to extract and decrypt credentials.xml using secret keys.

encryption-decryption-toolsexploitationpenetration-testing+2

1 year ago

hfs2

wgetnz/hfs2

CVE-2024-23692 | HFS 2.3m/2.4-RC07 RCE vulnerability fix

exploitationpenetration-testingremote-access-tool+2

6 months ago

CVE-2023-43872-CMSmadesimple-Arbitrary-File-Upload--XSS---File-Manager

sromanhu/cve-2023-43872-cmsmadesimple-arbitrary-file-upload--xss---file-manager

CMSmadesimple 2.2.18 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed…

exploitationphishing-toolsvulnerability-analysis+2

2 years ago

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

sromanhu/cve-2023-43871-wbce-arbitrary-file-upload--xss---media

WBCE 1.6.1 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will launch…

exploitationphishing-toolsvulnerability-analysis+2

2 years ago

Chrome-and-Edge-Version-Dumper

mav3r1ck0x1/chrome-and-edge-version-dumper

Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096

general-purpose-utilitiesinformation-gatheringscripting-automation+1

24 years ago

CVE-2024-7399-POC

davidxbors/cve-2024-7399-poc

Python-based proof-of-concept exploit for CVE-2024-7399 with check, command execution, and file upload capabilities against HTTPS endpoints.

command-and-controlexploitationpenetration-testing+2

1 year ago

Archived

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

chrisjd20/hikvision_cve-2017-7921_auth_bypass_config_decryptor

This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.

encryption-decryption-toolsexploitationhardware-iot-security+3

1165 years ago

CVE-2021-3019

givemefivw/cve-2021-3019

Automated exploitation tool for CVE-2021-3019 that reads target IPs from a text file and executes the exploit against HTTP endpoints.

exploitationinformation-gatheringreconnaissance+2

5 years ago

CVE-2023-4220-Proof-of-concept

lgenagul/cve-2023-4220-proof-of-concept

Chamilo LMS Unauthenticated Big Upload File that allows remote code execution

ctfexploitationpayload-generation+3

2 years ago

Hikvision-CVE-2017-7921-decryptor

lastvocher/hikvision-cve-2017-7921-decryptor

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, recovering user credentials from weakly encrypted…

encryption-decryption-toolsexploitationiot-security+3

10 months ago

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

p4tq/hikvision_cve-2017-7921_auth_bypass_config_decryptor

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, revealing user credentials and device settings.

encryption-decryption-toolsexploitationinformation-gathering+3

4 years ago

Janus-CVE-2017-13156

xyzasian/janus-cve-2017-13156

Java-based exploit tool for CVE-2017-13156 that bypasses Android APK signature verification by appending a DEX file to an existing APK, enabling code…

android-securitybinary-exploitationexploitation+2

158 years ago

Previous 1…456…100 Next